Severity Critical High Medium Low Informational Vulnerability Categories Abuse Of Functionality Acumonitor Api Bfla Api Bola Api Broken Auth Api Broken Object Prop Auth Api Dos Api Improper Inventory Management Api Misconfiguration Api Ssrf Arbitrary File Creation Arbitrary File Read Authentication Bypass BOLA Bruteforce Possible Buffer Overflow CSRF CSTI Code Execution Configuration Crlf Injection Deepscan Default Credentials Denial Of Service Dev Files Directory Listing Directory Traversal Eli Injection Error Handling File-upload File Inclusion Http Parameter Pollution Http Response Splitting Information Disclosure Insecure Admin Access Insecure Deserialization Internal Ip Disclosure Known Vulnerabilities LLM Ldap Injection Llm Excessive Agency Llm Insecure Output Handling Llm Prompt Injection Llm Prompt Leakage Llm Sensitive Information Disclosure Malware Missing Update Privilege Escalation RCE SSRF Sensitive Data Not Over Ssl Server Side Template Injection Session Fixation Source Code Disclosure Sql Injection Test Files Unauthenticated File Upload Url Redirection Weak Credentials Weak Crypto XFS XSS XXE Xpath Injection Vulnerability Name CVE CWE CWE Severity IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-9735) CVE-2016-9735 CWE-200 CWE-200 Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1099) CVE-2017-1099 CWE-200 CWE-200 Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1240) CVE-2017-1240 CWE-200 CWE-200 Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1251) CVE-2017-1251 CWE-200 CWE-200 Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1488) CVE-2017-1488 CWE-200 CWE-200 Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1507) CVE-2017-1507 CWE-200 CWE-200 Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1509) CVE-2017-1509 CWE-200 CWE-200 Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1524) CVE-2017-1524 CWE-200 CWE-200 Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1559) CVE-2017-1559 CWE-200 CWE-200 Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1570) CVE-2017-1570 CWE-200 CWE-200 Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1725) CVE-2017-1725 CWE-200 CWE-200 Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2017-1734) CVE-2017-1734 CWE-200 CWE-200 Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1423) CVE-2018-1423 CWE-200 CWE-200 Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1606) CVE-2018-1606 CWE-200 CWE-200 Medium IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-1734) CVE-2018-1734 CWE-200 CWE-200 Medium IBM RTC Files or Directories Accessible to External Parties Vulnerability (CVE-2017-1602) CVE-2017-1602 CWE-552 CWE-552 Medium IBM RTC Generation of Error Message Containing Sensitive Information (CVE-2020-4487) CVE-2020-4487 CWE-209 CWE-209 Medium IBM RTC Generation of Error Message Containing Sensitive Information Vulnerability (CVE-2020-4544) CVE-2020-4544 CWE-209 CWE-209 Medium IBM RTC Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-1753) CVE-2017-1753 CWE-94 CWE-94 Medium IBM RTC Improper Input Validation Vulnerability (CVE-2015-1928) CVE-2015-1928 CWE-20 CWE-20 Medium IBM RTC Improper Neutralization of HTTP Headers for Scripting Syntax Vulnerability (CVE-2024-51454) CVE-2024-51454 CWE-644 CWE-644 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-2606) CVE-2011-2606 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2011-2607) CVE-2011-2607 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-7453) CVE-2015-7453 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-7471) CVE-2015-7471 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-0273) CVE-2016-0273 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-0285) CVE-2016-0285 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-0331) CVE-2016-0331 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2864) CVE-2016-2864 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2926) CVE-2016-2926 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2986) CVE-2016-2986 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-3014) CVE-2016-3014 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-6035) CVE-2016-6035 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-6037) CVE-2016-6037 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9701) CVE-2016-9701 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9733) CVE-2016-9733 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9746) CVE-2016-9746 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9973) CVE-2016-9973 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1113) CVE-2017-1113 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1237) CVE-2017-1237 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1365) CVE-2017-1365 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1629) CVE-2017-1629 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1653) CVE-2017-1653 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1655) CVE-2017-1655 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1762) CVE-2017-1762 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1394) CVE-2018-1394 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1407) CVE-2018-1407 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1408) CVE-2018-1408 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1521) CVE-2018-1521 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1558) CVE-2018-1558 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1688) CVE-2018-1688 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1758) CVE-2018-1758 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1760) CVE-2018-1760 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1761) CVE-2018-1761 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1762) CVE-2018-1762 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1766) CVE-2018-1766 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1826) CVE-2018-1826 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1827) CVE-2018-1827 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1828) CVE-2018-1828 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1892) CVE-2018-1892 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1893) CVE-2018-1893 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1916) CVE-2018-1916 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1952) CVE-2018-1952 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1982) CVE-2018-1982 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1983) CVE-2018-1983 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-1984) CVE-2018-1984 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-4083) CVE-2019-4083 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-4249) CVE-2019-4249 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-4250) CVE-2019-4250 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-4747) CVE-2019-4747 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-4748) CVE-2019-4748 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4445) CVE-2020-4445 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4522) CVE-2020-4522 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4524) CVE-2020-4524 CWE-707 CWE-707 Medium IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-4525) CVE-2020-4525 CWE-707 CWE-707 Medium 1...23242526...121 24 / 121
